security bug and don't show qrcode on non books page